AOL and Netflix have been bitten by the deanonymization of their search/recommendation logs before. What will keep the same from happening here?